Security Bulletin

RISK: Medium Risk

Google Chrome Multiple Vulnerabilities

Multiple vulnerabilities were identified in Google Chrome, which may allow a remote attacker to obtain sensitive information from an affected system.

Last Update Date: 20 Jun 2016 10:14 Release Date: 20 Jun 2016 3954 Views

RISK: High Risk

Microsoft Windows Search Component Denial of Service Vulnerability

Windows Search Component Denial of Service VulnerabilityThis vulnerability occurs when the Windows Search component fails to properly handle certain objects in memory. An attacker who successfully exploited this vulnerability could cause server performance to degrade sufficiently to cause a denial of service condition. To exploit this vulnerability, ...

Last Update Date: 15 Jun 2016 17:47 Release Date: 15 Jun 2016 4260 Views

RISK: High Risk

Microsoft Active Directory Denial of Service Vulnerability

Active Directory Denial of Service VulnerabilityA denial of service vulnerability exists in Active Directory when an authenticated attacker creates multiple machine accounts. An attacker who successfully exploited this vulnerability could cause the Active Directory service to become non-responsive.

Last Update Date: 15 Jun 2016 17:47 Release Date: 15 Jun 2016 4067 Views

RISK: Medium Risk

Microsoft Windows PDF Multiple Vulnerabilities

Multiple Windows PDF Information Disclosure VulnerabilitiesInformation disclosure vulnerabilities exist in Microsoft Windows when a user opens a specially crafted .pdf file. An attacker who successfully exploited the vulnerabilities could read information in the context of the current user. Windows PDF Remote Code Execution VulnerabilityA remote code execution...

Last Update Date: 15 Jun 2016 17:47 Release Date: 15 Jun 2016 4113 Views

RISK: Medium Risk

Microsoft Exchange Server Multiple Vulnerabilities

Microsoft Exchange Information Disclosure VulnerabilityAn email filter bypass exists in the way that Microsoft Exchange parses HTML messages that could allow information disclosure. An attacker who successfully exploited the vulnerability could identify, fingerprint, and track a user online if the user views email messages using Outlook Web...

Last Update Date: 15 Jun 2016 17:47 Release Date: 15 Jun 2016 4140 Views

RISK: Medium Risk

Microsoft Windows Diagnostic Hub Elevation of Privilege Vulnerability

Windows Diagnostics Hub Elevation of Privilege VulnerabilityAn elevation of privilege vulnerability exists when the Windows Diagnostics Hub Standard Collector Service fails to properly sanitize input, leading to an unsecure library loading behavior. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges. ...

Last Update Date: 15 Jun 2016 17:47 Release Date: 15 Jun 2016 4031 Views

RISK: Medium Risk

Microsoft WPAD Elevation of Privilege Vulnerabilities

Windows WPAD Elevation of Privilege VulnerabilityAn elevation of privilege vulnerability exists in Microsoft Windows when the Web Proxy Auto Discovery (WPAD) protocol falls back to a vulnerable proxy discovery process. An attacker who successfully exploited this vulnerability could bypass security and gain elevated privileges on a targeted...

Last Update Date: 15 Jun 2016 17:47 Release Date: 15 Jun 2016 4176 Views

RISK: Medium Risk

Microsoft Windows SMB Server Elevation of Privilege Vulnerability

Windows SMB Server Elevation of Privilege Vulnerability An elevation of privilege vulnerability exists in the Microsoft Server Message Block (SMB) when an attacker forwards an authentication request intended for another service running on the same machine. An attacker who successfully exploited this vulnerability could execute arbitrary...

Last Update Date: 15 Jun 2016 17:43 Release Date: 15 Jun 2016 4193 Views

RISK: Medium Risk

Microsoft Windows Graphics Component Multiple Vulnerabilities

Windows Graphics Component Information Disclosure Vulnerability An information disclosure vulnerability exists when the Windows Graphics Component (GDI32.dll) fails to properly handle objects in memory, allowing an attacker to retrieve information that could lead to an Address Space Layout Randomization (ASLR) bypass. ...

Last Update Date: 15 Jun 2016 17:43 Release Date: 15 Jun 2016 4030 Views

RISK: Medium Risk

Microsoft Windows Group Policy Elevation of Privilege Vulnerability

Group Policy Elevation of Privilege VulnerabilityAn elevation of privilege vulnerability exists when Microsoft Windows processes group policy updates. An attacker who successfully exploited this vulnerability could potentially escalate permissions or perform additional privileged actions on the target machine.

Last Update Date: 15 Jun 2016 17:43 Release Date: 15 Jun 2016 4012 Views